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Department of Defense 

INSTRUCTION 



NUMBER S-3325.10 
June 6, 2013 



USD(l) 



SUBJECT: Human Intelligence (HUMINT) Activities in Cyberspace (U//FOUO) 
References: See Enclosure 1 (U) 



1 . (U/)TOUOJ PURPOSE . As authorized by DoD Directive (DoDD) 5143.01 (Reference (a)), 
this instruction: 

a. (U//TOUO) Establishes policy and assigns responsibilities for HUMINT activities in 
cyberspace. 

b. (U /jTQUQ) I mplements policy established in Executive Order 12333, DoDD 
S-5200.37, and DoDD S-3325.09 (References (b), (c), and (d». 



2. (U) APPLICABILITY 

a. (U) This instruction applies to OSD, the Military Departments, the Office of the 
Chairman of the Joint Chiefs of Staff and the Joint Staff, the Combatant Commands, the Office 
of the Inspector General of the Department of Defense, the Defense Agencies, the DoD Field 
Activities, and all other organizational entities within the DoD (referred to collectively in this 
instruction as the “DoD Components”). 



b. (U) Nothing in this issuance expands existing HUMINT authorities in References (c), (d), 
and DoD Instruction (DoDI) S-5200.42 (Reference (e» or limits the authorities of the DoD 
Components heads derived from statute. Executive order, regulation, and interagency agreement. 




3. (U//TQUOT POLICY . It is DoD policy that DoD HUMINT activities in cyberspace will : 



Classify 
Reason* l 4(c 
Declassify on June T 



Under Secretary of Defense for Intelligence 




S ECRETffNOroil ' HI 





SECRET//NOFORN 




d. (U //FQUO) , Be consistent with DoDI 1 100.22 (Reference (g)). The direction and control 
of HUMINT activities in cyberspace, including the approval, supervision, and oversight of such 
activities, are inherently governmental activities and may be performed only by U S. 

Government (USG) personnel (i.e., civilian employees or Service members). DoD contractors 
with proper training and security clearances may perform appropriate support functions, such as 
serving as linguists, interpreters, report writers, and information technology technicians, 
provided that appropriately trained and qualified USG personnel are available to oversee the 
contractor’s performance and to ensure that contractor personnel do not perform activities that 
are inherently governmental. 

e. (U/z'POUO^Be conducted in accordance with applicable law and policy, including 
References (b) and (c), DoDD 5240.01 (Reference (h)), DoDD 5240. 1-R (Reference (i)), 
Directive-type Memorandum (DTM) 08-01 1 (Reference (j)), DTM 08-052 (Reference (k)), the 
privacy protections listed DoD 5400.1 1-R (Reference (I)), National Human Intelligence Manager 
Directive (NHMD) 006.08 (Reference (m)), and NHMD 007.08, Annex C (Reference (n)). 



4 (U) RESPONSIBILITIES . See Enclosure 2. 



5 fl-H PROCEDURES . See Enclosure 3. 



6. (U) RELEASABILITY . Restricted. This instruction is approved for restricted release. 
Authorized users may obtain copies on the SECRET Internet Protocol Router Network from the 
DoD Issuances Website at http://www.dtic.smil.mil/whs/directives. 



7 (U) EFFECTIVE DATE . This instruction: 
a. (U) Is effective June 6, 2013. 
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b. (U) Must be reissued, cancelled, or certified current within 5 years of its publication in 
accordance with DoDI 5025.01 (Reference (o)). If not, it will expire effective June 6, 2023 and 
be removed from the DoD Issuances Website. 




Under Secretary of Defense 
for Intelligence 



(U) Enclosures 

1. (U) References 

2. (U) Responsibilities 

3. (U) Procedures 
(U) Glossary 
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ENCLOSURE 1 
REFERENCES 

The reference titles in this enclosure are UNCLASSIFIED 

(a) DoD Directive 5143.01, “Under Secretary of Defense for Intelligence (USD(I)),” 

November 23, 2005, as amended 

(b) Executive Order 12333, “United States Intelligence Activities,” December 4, 1981, as 
amended 

(c) DoD Directive S-5200.37, “Management and Execution of Defense Human Intelligence 
(HUMINT) (U),” February 9, 2009, as amended 

(d) DoD Directive S-3325.09, “Oversight, Management, and Execution of Defense Clandestine 
Source Operations,” January 9, 2013 

(e) DoD Instruction S-5200.42, “Defense Human Intelligence (HUMINT) and Related 
Intelligence Activities (U),” December 8, 2009, as amended 

(f) Joint Publication 2*01.2, “Counterintelligence and Human Intelligence in Joint Operations,” 
March 16, 201 1 

(g) DoD Instruction 1 1 00.22, “Policy and Procedures for Determining Workforce Mix,” 

April 12, 2010 

(h) DoD Directive 5240.01, “DoD Intelligence Activities,” August 27, 2007, as amended 

(i) DoD 5240. 1-R, “Procedures Governing the Activities of DoD Intelligence Components 
That Affect United States Persons,” December 7, 1982 

(|) Di recti ve-Type Memorandum 08-011, “Intelligence Oversight Policy Guidance,” March 
26, 2008, as amended 

(k) Directive-Type Memorandum 08-052, “DoD Guidance for Reporting Questionable 
Intelligence Activities and Significant or Highly Sensitive Matters,” June 17, 2009, as 
amended 

(l) DoD 5400.1 1-R, “Department of Defense Privacy Program,” May 14, 2007 

(m) National HUMINT Manager Directive Number 006.08, “Intelligence Community Directive 
304 - Human Intelligence: Clandestine Operational Coordination Procedures,” July 29, 
2008 

(n) National HUMINT Manager Directive Number 007.08, Annex C, “National HUMINT 
Manager Tradecraft Training Standards in a Cyber Environment,” August 30, 2012 

(o) DoD Instruction 5025 .0 1 , “DoD Di rectives Program,” September 26, 20 1 2 

(p) DoD Instruction 0-5 100.93, “Defense Counterintelligence (Cl) and Human Intelligence 
(HUMINT) Center (DCHC) ,” August 13, 2010 

(q) DoD Instruction 3305. 1 5, “DoD Human Intelligence (HUMINT) Training,” February 25, 
2008 

(r) DoD Directive S-5105.61, “DoD Cover and Cover Support Activities (U) ” May 6, 2010 

(s) DoD Instruction S-5105.63, “Implementation of DoD Cover and Cover Support activities,” 
March 9, 1 999 

(t) Director of Central Intelligence Directive 7/3, “Information Operations and Intelligence 
Community Related Activities,” July 1, 1999 



4 

9CCRET7/NOFORN 



ENCLOSURE I 




9ECRET//W0F0RW 



DoDI S-3325. 10, June 6, 2013 

(u) Defense HUMBMT Enterprise Manual 3301 .002, “Defense Human Intelligence (HUMINT) 
Enterprise Manual Volume II: Collection Operations, November 23, 2010 1 

(v) DoD Instruction 0-5 1 00.94, “Oversight, Coordination, Assessment, and Reporting of DoD 
Intelligence and Intelligence-Related Sensitive Activities,” September 27, 201 1 

(w) Title 10, United States Code 

(x) Presidential Pol icy Directive-20, “U.S. Cyber Operations Policy,” October 23, 20 1 2 

(y) Joint Publication 3-1 2, “Cyberspace Operations,” February 5, 2013 

(z) Joint Publication 1 -02, “Department of Defense Dictionary of Military and Associated 
Terms,” current edition 



1 Available at IUtpy/dchc.dia.smil.itiil/policy/dhc_m 3301_002_signed.pdf 
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ENCLOSURE 2 
RESPONSIBILITIES (U) 

1. (U) LINDER SECRETARY OF DEFENSE FOR INTELLIGENCE rtJSDfnV The USD(I): 

a. (U/lTOUO) Oversees the development and implementation of DoD policy for HUMINT 
activities in cyberspace. 

b. (U/iTOUO^ Approves a DoD strategy for HUMINT activities in cyberspace. 

c. (U/ffOWO^ Approves DoD training and certification standards for HUMINT activities in 
cyberspace. 

d. (U) Oversees, provides guidance, and directs the development and sustainment of DoD 
HUMINT activities in cyberspace to collect against validated intelligence requirements. 




2. (U) DIRECTOR. NATIONAL SECURITY AGENCY/CHIEF. CENTRAL SECURITY 
SERVICE fDIRNSA/CHCSSV Under the authority, direction, and control of the USD(I) and in 
addition to the responsibilities in section 6 of this enclosure as they pertain to the 
DIRNSA/CHCSS, the DIRNSA/CHCSS: 




3. (U) DIRECTOR. DEFENSE INTELLIGENCE AGENCY fDIAV Under the authority, 
direction, and control of the USD(I), the Director, DIA: 



■ 1 ■ — • "• J J V : — ' — - yj " v " * 



a. fBW ffH y . 





■s 
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4. (U) DHEs . TheDHEs: 




e. (U) Report all threat information obtained via cyberspace through established reporting 
channels. 
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6. (U) COMMANDER. USCYBERCOM . Under the authority, direction, and control of the 
Commander, United States Strategic Command, the Commander, USCYBERCOM: 
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ENCLOSURE 3 
PROCEDURES (U) 




4. (U) HUMINT CYBERSPACE TRADECRAFT 
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GLOSSARY 



PARTI. ABBREVIATIONS AND ACRONYMS n n 
(U) The abbreviations and acronyms in this Glossaiy are UNCLASSIFIED 



DUE Defense HUMINT Executor 

DIA Defense Intelligence Agency 

DIRNSA/CHCSS Director, National Security Agency/Chief, Central Security Service 

DoDD DoD Directive 

DoDI DoD Instruction 

DTM Directive-Type Memorandum 

HUMINT human intelligence 



IC Intelligence Community 

joint force counterintelligence and human intelligence staff element 

NHMD National Human Intelligence Manager Directive 

SIGINT signals intelligence 

USCYBERCOM United States Cyber Command 
USD(I) Under Secretary of Defense for Intelligence 

USG U.S. Government 



PART n . DEFINITIONS ft ]) 

(U) Unless otherwise noted, these terms and their definitions are for the purpose of this 
Instruction. 

(U) cyber operations. Defined in Presidential Policy Directive 20 (Reference (x)). 

(U) cyber persona. An identity used in cyberspace to obtain information or influence others, 
while dissociating the actor’s true identity or affiliation. 

(U) cyberspace. Defined in Joint Publication 3-12 (Reference (y)). 

(U) cyberspace operations. Defined in Reference (y). 

(U) DHE . Defined in Reference (c). 

(U) digital tradecraff . Digital or cyber tactics, techniques, and procedures designed to obscure 
or frustrate observation by hostile or unfriendly entities. 
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(U) HUMINT . Defined tn Reference (c). 




(U) open-source intelligence . Defined in Joint Publication 1-02 (Reference (z)). 



(U) signals intelligence . Defined in Reference (z). 

(U) targeting. In the HUMINT context, the processing of all-source intelligence to determine 
potential sources capable of satisfying HUMINT requirements. 
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